This article describes how to recover data from a BitLocker encrypted drive by attaching it to another, BitLocker capable, system. The required BitLocker recovery key can be obtained in the SafeGuard Management Center.
Applies to the following Sophos product(s) and version(s)
SafeGuard BitLocker Client 6.10.0
SafeGuard BitLocker Client 6.00.1
Windows 7, Windows 8
What To Do
1. Slaving a boot volume
Note: This procedure is not available for system volumes of clients with installed Bitlocker C/R feature (UEFI). BLCRBackupRestoren.exe can be used to restore the "Sophos Boot manager" on such systems if required (details about the tool can be found in the Tools manual).
After attaching the drive to another system (e.g. using a USB adapter), you get an "access denied" for the volume which is encrypted with Microsoft BitLocker.
- Open the context menu of the encrypted volume in the Windows Explorer and choose "Unlock Drive..." or
- Go to Control Panel | BitLocker Drive Encryption | and choose "Unlock drive"
Both options start the recovery of the BitLocker encrypted volumes.
After entering the correct BitLocker recovery key you get access to the encrypted volume.
2. Slaving a data volume
After slaving an encrypted data volumes, you are asked for the Password (if Password was chosen to unlock the drive).
Normally, the drive will be unlocked with a Password. If the Password is not known or a different unlock method is configured, you have to use the recovery option by clicking on "I forgot my password":
- Select the Option "Type the recover key" to get the possibility to enter the BitLocker recovery key, which was gathered from the SafeGuard Management Center before.
After entering the recovery key correctly, it is possible to access the volume and recover the data.